Analysis
-
max time kernel
4s -
max time network
130s -
platform
android_x86 -
resource
android-x86-arm-20240506-en -
resource tags
-
submitted
10/05/2024, 11:39
General
-
Target
2eed7318ca564a909e75ad616cad5cdf_JaffaCakes118.apk
-
Size
5.7MB
-
MD5
2eed7318ca564a909e75ad616cad5cdf
-
SHA1
23d1e697792868564af531a69b21c1901601e349
-
SHA256
9bc9fd870732ee1ed2f79118a27c703d84c44f9b456a464d88b7558e13a79258
-
SHA512
bca2e1b9e9dc8fc82654c1f1bd1bc6052710e006a27726046cd78627374c13ca1c84190a6fb422a5e9b47307af46f7ccf1394b53afd704dcc725d33349dd3a3d
-
SSDEEP
98304:Jtzl6sVbd7APYMpzdYSgjjRS8MO70AaevnCdaGJTMjQas3Jk10f8VwoA+KXeap:JtzYsMp2SgIFO0AaxfNxnoA+KXes
Score
8/10
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks if the internet connection is available 1 TTPs 1 IoCs
-
Reads information about phone network operator. 1 TTPs
Processes
-
com.bestcoolfungames.antsmasher1⤵
- Checks memory information
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available